$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/3168/-NG0bLl1h40-PhgKVbR2N40_j5E.roa File: -NG0bLl1h40-PhgKVbR2N40_j5E.roa (raw, json) Hash identifier: K32pl5J9WfPVVhdRC9NRZ1eJVVKzrY07QQL9YorGUPQ= Subject key identifier: F8:D1:B4:6C:B9:75:87:8D:3E:3E:18:0A:55:B4:76:37:8D:3F:8F:91 Certificate issuer: /CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Certificate serial: 0FED Authority key identifier: 24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/-NG0bLl1h40-PhgKVbR2N40_j5E.roa Signing time: Mon 28 Oct 2024 07:22:53 +0000 ROA not before: Mon 28 Oct 2024 07:22:53 +0000 ROA not after: Sat 27 Sep 2025 02:40:14 +0000 asID: 146806 IP address blocks: 103.79.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Feb 2025 22:57:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4077 (0xfed) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=240987F40A6030CDFA33DED1EEE7CF4DC7C30094 Validity Not Before: Oct 28 07:22:53 2024 GMT Not After : Sep 27 02:40:14 2025 GMT Subject: CN=F8D1B46CB975878D3E3E180A55B476378D3F8F91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:77:b8:da:d5:66:bf:3c:e6:a4:49:61:ab:d2: ba:d5:3c:e0:1f:ba:69:5b:d8:e2:55:d9:4c:66:6e: 97:80:a2:9f:8b:44:7d:b6:74:3a:0c:7a:89:db:08: 13:8b:52:a7:c5:5d:a4:c7:0b:12:da:df:0a:47:76: 4a:b8:62:af:ba:11:1b:ba:f0:69:e1:30:06:14:7a: 2b:43:2d:bb:8c:db:ac:2e:e6:33:ee:38:e9:23:eb: dd:81:a3:1e:8f:76:a7:bf:d1:00:14:83:8b:75:e3: fd:a9:e2:4f:81:f5:35:3d:35:9f:39:88:b3:5f:b7: f2:f8:fa:6d:18:03:e9:78:2f:1a:32:e6:99:ca:f6: 6c:b3:00:fa:59:c1:93:e1:ff:42:75:fb:da:1e:60: a8:84:12:1a:a8:e6:2b:fd:d4:16:00:33:cb:04:b6: 71:ec:14:78:17:26:94:54:0a:4b:17:a0:59:1b:cc: ee:23:e5:c3:88:96:5f:be:b8:34:62:7d:90:0a:22: a1:de:18:be:6f:e9:ea:ca:a2:c1:11:dc:80:74:ea: 26:c0:11:c1:65:3e:7c:b3:e6:9a:cc:75:02:e2:47: ea:c6:93:04:6e:c6:f5:30:7a:15:e3:04:57:64:12: 25:1c:2f:6a:e7:1a:e2:c1:3a:87:55:eb:de:04:e3: b4:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:D1:B4:6C:B9:75:87:8D:3E:3E:18:0A:55:B4:76:37:8D:3F:8F:91 X509v3 Authority Key Identifier: keyid:24:09:87:F4:0A:60:30:CD:FA:33:DE:D1:EE:E7:CF:4D:C7:C3:00:94 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/JAmH9ApgMM36M97R7ufPTcfDAJQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/JAmH9ApgMM36M97R7ufPTcfDAJQ.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/3168/-NG0bLl1h40-PhgKVbR2N40_j5E.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 103.79.228.0/24 Signature Algorithm: sha256WithRSAEncryption 6e:78:27:30:8b:57:93:0c:55:67:78:ca:34:c7:aa:ee:47:0b: 1f:dd:96:24:d3:0e:48:e5:f9:b5:2a:8c:f4:c0:85:ff:3b:dd: 2e:11:b2:d5:9e:50:d8:47:a2:98:28:19:57:0a:a7:f5:b0:80: 84:86:c8:58:0a:ad:b1:f7:1b:7d:73:27:0d:e1:42:5d:f9:d4: a1:1b:a0:9d:29:ae:b6:06:7e:6c:a1:eb:65:49:da:8c:b7:da: f0:5c:f8:07:01:d4:a5:cb:77:d1:3f:50:16:c9:27:3e:ec:20: dd:c4:85:43:d2:6f:61:6a:ff:eb:e0:db:55:77:24:ea:3a:90: c4:f8:d3:f3:ef:09:95:8d:eb:32:16:98:31:6a:9f:29:04:8e: ee:e7:97:b9:fa:b1:7e:6b:2d:2d:ea:c5:81:54:bd:07:26:05: 2c:1a:27:51:4d:71:a7:c3:36:a9:3c:56:06:7b:0e:10:e7:63: 8c:aa:22:66:cb:57:80:12:0b:8f:26:0d:b7:69:04:18:ef:39: 55:34:ad:a9:27:a3:75:74:6c:23:11:ba:2f:31:b6:e2:4b:53: 63:28:dd:06:0b:74:cc:23:04:71:2c:6f:87:e4:c3:09:c5:72: 32:09:a0:09:04:43:d6:8c:d0:45:00:67:0b:87:02:67:ca:8f: be:aa:d1:b1 -----BEGIN CERTIFICATE----- MIIE1zCCA7+gAwIBAgICD+0wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjQw OTg3RjQwQTYwMzBDREZBMzNERUQxRUVFN0NGNERDN0MzMDA5NDAeFw0yNDEwMjgw NzIyNTNaFw0yNTA5MjcwMjQwMTRaMDMxMTAvBgNVBAMTKEY4RDFCNDZDQjk3NTg3 OEQzRTNFMTgwQTU1QjQ3NjM3OEQzRjhGOTEwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQC3d7ja1Wa/POakSWGr0rrVPOAfumlb2OJV2UxmbpeAop+LRH22 dDoMeonbCBOLUqfFXaTHCxLa3wpHdkq4Yq+6ERu68GnhMAYUeitDLbuM26wu5jPu OOkj692Box6Pdqe/0QAUg4t14/2p4k+B9TU9NZ85iLNft/L4+m0YA+l4Lxoy5pnK 9myzAPpZwZPh/0J1+9oeYKiEEhqo5iv91BYAM8sEtnHsFHgXJpRUCksXoFkbzO4j 5cOIll++uDRifZAKIqHeGL5v6erKosER3IB06ibAEcFlPnyz5prMdQLiR+rGkwRu xvUwehXjBFdkEiUcL2rnGuLBOodV694E47SlAgMBAAGjggHzMIIB7zAdBgNVHQ4E FgQU+NG0bLl1h40+PhgKVbR2N40/j5EwHwYDVR0jBBgwFoAUJAmH9ApgMM36M97R 7ufPTcfDAJQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBdBgNVHR8EVjBUMFKg UKBOhkxyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvMzE2 OC9KQW1IOUFwZ01NMzZNOTdSN3VmUFRjZkRBSlEuY3JsMGMGCCsGAQUFBwEBBFcw VTBTBggrBgEFBQcwAoZHcnN5bmM6Ly9ycGtpLmNubmljLmNuL3Jwa2kvQTkxNjJF M0QwMDAwL0pBbUg5QXBnTU0zNk05N1I3dWZQVGNmREFKUS5jZXIwDgYDVR0PAQH/ BAQDAgeAMIGdBggrBgEFBQcBCwSBkDCBjTBYBggrBgEFBQcwC4ZMcnN5bmM6Ly9y cGtpLmNubmljLmNuL3Jwa2kvQTkxNjJFM0QwMDAwLzMxNjgvLU5HMGJMbDFoNDAt UGhnS1ZiUjJONDBfajVFLnJvYTAxBggrBgEFBQcwDYYlaHR0cHM6Ly9ycGtpLmNu bmljLmNuL3JyZHAvbm90aWZ5LnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw BgMEAGdP5DANBgkqhkiG9w0BAQsFAAOCAQEAbngnMItXkwxVZ3jKNMeq7kcLH92W JNMOSOX5tSqM9MCF/zvdLhGy1Z5Q2EeimCgZVwqn9bCAhIbIWAqtsfcbfXMnDeFC XfnUoRugnSmutgZ+bKHrZUnajLfa8Fz4BwHUpct30T9QFsknPuwg3cSFQ9JvYWr/ 6+DbVXck6jqQxPjT8+8JlY3rMhaYMWqfKQSO7ueXufqxfmstLerFgVS9ByYFLBon UU1xp8M2qTxWBnsOEOdjjKoiZstXgBILjyYNt2kEGO85VTStqSejdXRsIxG6LzG2 4ktTYyjdBgt0zCMEcSxvh+TDCcVyMgmgCQRD1ozQRQBnC4cCZ8qPvqrRsQ== -----END CERTIFICATE-----Generated at Sun Feb 16 22:04:45 2025 by rpki-client